Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/02/18 12:54 a.m.•44 views

OpenClaw Google Chat shared-path webhook target ambiguity allowed cross-account policy-context misrouting

Summary When multiple Google Chat webhook targets are registered on the same HTTP path, and request verification succeeds for more than one target, inbound webhook events could be routed by first-match semantics. This can cause cross-account policy/context misrouting. Affected Packages / Versions...

8.2CVSS5.8AI score0.00514EPSS
SaveExploits0References6Affected Software2
Rows per page
Query Builder